Hacker News new | ask | show | jobs
by daveoc64 1350 days ago
> I'm not an expert dealing with PSP, but situations where a payment is validated through a "return to merchant URL" is risky and could lead to payment being captured without the merchant being notified.

There are ways to deal with that - a very simple one is a "mop up" process, as suggested by the GOV.UK Pay Service:

https://docs.payments.service.gov.uk/integrate_with_govuk_pa...

1 comments

But then how is this simpler or better than listening for webhooks (push)? Also, PaymentIntent allows you to query its state (pull) as described in your link.